summaryrefslogtreecommitdiff
path: root/usr.sbin/ntpd
AgeCommit message (Expand)Author
2019-01-21Improve logging for TLS certificate validity checking.Joel Sing
2019-01-21Explicitly check timegm() return value.Joel Sing
2019-01-21Perform manual validity checking of the X.509 certificate for constraints.Joel Sing
2019-01-20Don't use *a - *b as compare idiom, it does not work as expected forOtto Moerbeek
2019-01-14Prevent multiple ntpds from tripping over each other.Florian Obser
2019-01-07log dns failures, even if temporary. ok bennoTed Unangst
2018-11-29update for libtls default cert changes.Ted Unangst
2018-11-06Use TLS_CA_CERT_FILE instead of a separate define.Joel Sing
2018-11-05Be stricter with TLS configuration for ntpd constraints.Joel Sing
2018-11-01- odd condition/test in PF lexerAlexandr Nedvedicky
2018-09-07Make host_*() AF-agnostickn
2018-08-31the main process must chdir to /, since it cannot have daemon() do theTheo de Raadt
2018-08-08ntpd unveils the cert.pem "r" file (which is passed-over-socket to theTheo de Raadt
2018-08-04Revert back previous commit, we have decided that socket files don't cause anyRicardo Mestre
2018-08-02ntpd(8) has logic in place to delete its control socket on shutdown, but itRicardo Mestre
2018-07-19revert previous, something isn't quite right as clients see ntpdStuart Henderson
2018-07-12if we couldn't update the clock for ~1h due to lack of data from peers andHenning Brauer
2018-07-09No need to mention which memory allocation entry point failed (malloc,Kenneth R Westerback
2018-07-08Be consistent in warn() and log_warn() usage whenKenneth R Westerback
2017-09-06ntpd has been on by default for over two years now, so reworkJason McIntyre
2017-08-11zero out sockaddr_in before use; fixes use of stack garbage as port numberChristian Weisgerber
2017-08-10naddy@ reported confusion on why "query from" seemed to be ignored injob
2017-05-31tweak previous;Jason McIntyre
2017-05-30add option "query from <ip>" to ntpd.conf, to specify a local IPSebastian Benoit
2017-04-17don't manipulate hdr.len, it's used internally by libutil now; ok florian@Otto Moerbeek
2017-03-21From a syslog perspective it does not make sense to log fatal andAlexander Bluhm
2017-03-01*nargv[] holds an array of pointers, so it should beGleydson Soares
2017-01-20add logging messages to distinguish which safty check failedPeter Hessler
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
2017-01-09Replace hand-rolled for(;;) traversal of ctl_conns TAILQ withKenneth R Westerback
2017-01-08Sync log.c with the latest version from vmd/log.c that preserves errnoReyk Floeter
2016-12-30markup from jan stary;Jason McIntyre
2016-12-05Use the stack to hold the constraint child process variables instead ofRafael Zalamena
2016-12-01Remove unused variable which was leaking memory, and while here remove 2 otherRicardo Mestre
2016-10-18Check for EAGAIN on imsg_flush() return otherwise we might be failingRafael Zalamena
2016-10-18Save the constraint process pid by getting the start_child() return value,Rafael Zalamena
2016-10-12copy updated log.c from vmd: for correctness, save errno when doingReyk Floeter
2016-10-03Fix a possible bug that will happen with dup2() when oldd == newd. In thatRafael Zalamena
2016-09-26Teach ntpd(8) constraint process to use exec*() instead of just forking,Rafael Zalamena
2016-09-26Teach ntpd(8) how to use socket status to shutdown the daemon. While atRafael Zalamena
2016-09-14Teach ntpd(8) how to fork+exec.Rafael Zalamena
2016-09-14Add clarifications ("comments") to three places where it wasn'tReyk Floeter
2016-09-14Fix copyright disclaimer in util.c.Reyk Floeter
2016-09-03Remove the oh so funny "LOSS OF MIND" from the diclaimer that was notReyk Floeter
2016-08-27Pull in <sys/time.h> for struct timespec, timeval, or clockratePhilip Guenther
2016-07-13Adjust existing tls_config_set_cipher() callers for TLS cipher groupJoel Sing
2016-06-01ntpd is too aggressive about retrying constraint connections. ThisTheo de Raadt
2016-05-21Harden TLS for ntpd constraints - stop disabling server name verification,Joel Sing
2016-05-06Unconfuse things by renaming variables to match their contents.Joel Sing
2016-05-02prepare userland for removing chroot(2) from allowed syscalls under pledge(2).Sebastien Marie